The guards over the proxy's data plane, gathered as one import for the fetch and serve layers that compose them at the boundary.

Each child owns its own contract: where the proxy may fetch in Ecluse.Core.Security.Host, the authority those gates compare in Ecluse.Core.Security.Authority, and what an upstream response may cost in Ecluse.Core.Security.Limits.